Certified Secure J2EE Developer (CSJD™)
The course will present security guidelines and considerations in Java applications development. The participants will learn the basics of application security, how to enforce security on a J2EE application, enabling standard J2EE security mechanisms and other security related issues. In addition, the course presents an overview Client's Security manager, including authentication and authorization implementation.
Course contents
• Case Studies
• Threat Modeling
• Exercise on Secure Design
• Application Security Design Principles
• Introduction to Web Hacking
• Hacme Bank & Hacme Books - Exercises
• Introduction on Java Framework
• J2EE framework enforce security
• JVM's role Byte-code and type safety
• Java language security and Sandbox concept
• Authentication & Authorization API's
• Java Access Control Features
• Java Authentication and Authorization Services
• Cryptography
• Common Security Mistakes made by developers
• Vulnerabilities Exploited and suggested countermeasures (Exercise)
• Database Security - Oracle and MS SQL
Who should attend this course?
• Java developers wishing to improve their security skills
• Development & System Architects wishing to improve their security skills and awareness
Objectives of the course
Upon completion of this course, participants will be able to:
• Understand the need for security
• Understand the security threats
• Design and develop secured J2EE applications
• Design & develop application using Java's Security API